Privacy Policy
Effective Date: 3 June 2026
This Privacy Policy describes how hitstarscasino.com ("we", "us", or "our") collects, uses, stores, and discloses personal information when you visit our website or interact with our services. We are committed to protecting your privacy in accordance with the Privacy Act 2020, the Privacy Amendment Act 2025, and applicable Information Privacy Principles (IPPs) in New Zealand.
1. Introduction and scope
This policy applies to all personal information collected through hitstarscasino.com, including information submitted via contact forms, email correspondence, cookie technologies, and server logs. This policy does not apply to third-party websites linked from our Site, including sportsbook operators. Those services have their own privacy policies, and we encourage you to review them before providing personal information.
By using this Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Site and contact us with any concerns at [email protected].
2. Information we collect
We may collect the following categories of personal information depending on how you interact with our Site:
- Contact information such as your name and email address when you submit an enquiry through our contact form or send us an email directly.
- Technical and usage data including your IP address, browser type and version, operating system, device type, referring URL, pages visited, time spent on pages, and click patterns collected through server logs and analytics tools.
- Cookie and preference data including age-verification status stored in session storage and cookie consent choices stored in local storage on your device.
- Communications content including the substance of messages you send to us, which we retain to respond to your enquiry and maintain a record of our correspondence.
We do not intentionally collect sensitive personal information such as financial account details, government identification numbers, or health information. We do not operate a sportsbook and do not process wagering transactions or hold player funds.
3. How we collect information
We collect personal information through several methods. Information is primarily collected directly from you when you voluntarily provide it through contact forms, email, or other communications. We also collect information automatically when you visit our Site through server logs, cookies, and similar technologies that record technical data about your browsing session.
Where personal information is received indirectly from third parties, such as analytics providers or affiliate tracking partners, we apply notification requirements where applicable under Information Privacy Principle 3A (IPP3A), including obligations regarding collection from third parties introduced by the Privacy Amendment Act 2025. We take reasonable steps to ensure you are aware that your information has been collected and the purposes for which it will be used.
4. Purposes of collection and use
We use personal information for the following purposes: operating, maintaining, and improving the Site and its content; responding to your enquiries, feedback, and support requests; processing privacy access and correction requests under the Privacy Act 2020; analysing Site usage patterns to improve user experience and content relevance; complying with legal obligations and responding to lawful requests from authorities; detecting and preventing fraud, abuse, or security incidents; and managing affiliate relationships and measuring the effectiveness of referral links, where applicable.
We will not use your personal information for purposes unrelated to those described above without obtaining your consent, except where permitted or required by law.
5. Disclosure of personal information
We may share personal information with trusted service providers who assist us in operating the Site, such as web hosting providers, email service providers, and analytics platforms. These providers are contractually required to handle personal information securely and only for the purposes we specify. We may also disclose information where required by law, regulation, court order, or government request, or where necessary to protect our rights, safety, or the rights and safety of others.
We do not sell personal information to third parties for their independent marketing purposes. Affiliate partners may receive anonymised or aggregated referral data but not personally identifiable contact details unless you independently provide information to them after leaving our Site.
6. Storage, retention, and security
Personal information is stored on secure servers with access restricted to authorised personnel. We apply reasonable technical and organisational safeguards against unauthorised access, misuse, loss, alteration, or disclosure, including encryption in transit where supported, access controls, and regular review of our security practices.
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Contact form submissions and email correspondence are typically retained for up to three years unless a longer retention period is required by law or you request earlier deletion subject to our legal obligations.
7. Your rights under New Zealand privacy law
Under the Privacy Act 2020, you have the right to request access to personal information we hold about you and to request correction of any information that is inaccurate, incomplete, outdated, or misleading. You may also request deletion of your personal information where we have no lawful basis to retain it.
To exercise these rights, contact us at [email protected]. We will respond within a reasonable timeframe as required by law. If you are dissatisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.
8. Overseas disclosure and cross-border transfers
Some of our service providers may process personal information outside New Zealand, including in countries that may not have equivalent privacy protections. Where personal information is disclosed overseas, we take reasonable steps to ensure that comparable safeguards are applied in accordance with cross-border data transfer requirements under the Privacy Act 2020 and amendments introduced by the Privacy Amendment Act 2025. This may include contractual protections, provider certifications, or assessments of the receiving country's privacy framework.
9. Cookies and tracking technologies
We use cookies and similar technologies as described in our Cookie Policy. Essential cookies support core Site functionality such as remembering your age-verification and cookie consent preferences. You can manage cookie preferences through your browser settings and our cookie consent banner, though disabling certain cookies may affect Site functionality.
10. Privacy breaches and complaints
If we become aware of a privacy breach that has caused or is likely to cause serious harm, we will assess the breach and notify affected individuals and the Office of the Privacy Commissioner where required under the Privacy Act 2020. We maintain internal procedures for identifying, containing, and responding to privacy incidents.
For privacy complaints or concerns, contact us first at [email protected]. If we cannot resolve your complaint to your satisfaction, you may contact the Office of the Privacy Commissioner for independent review.
11. Updates to this policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements, including amendments arising from the Privacy Amendment Act 2025. The Effective Date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Material changes may be communicated through a notice on the Site where appropriate.
12. Contact us
For privacy enquiries, access requests, corrections, or complaints, contact our privacy team at [email protected]. We aim to respond within 20 working days for access requests as required under the Privacy Act 2020.